Sophisticated HTTP and DNS DDoS attacks on the rise

Lucian Constantin / Report

Source : https://www.csoonline.com/article/646765/sophisticated-http-and-dns-ddos-attacks-on-the-rise.html?utm_date=20230721135037&utm_campaign=CSO%20US%20First%20Look&utm_content=Slot%20One%20Read%20More%3A%20Cybercriminals%20are%20now%20using%20techniques%20to%20launch%20distributed%20denial%20of%20service%20attacks%20once%20only%20available%20to%20nation-state%20threat%20actors.&utm_term=CSO%20US%20Editorial%20Newsletters&utm_medium=email&utm_source=Adestra&huid=bc164ca7-c6da-45ec-906e-9b102c1ec548

Cybercriminals are now using techniques to launch distributed denial of service attacks once only available to nation-state threat actors.

The last few months have seen an increase in the number of distributed denial-of-service (DDoS) vectors with sophisticated techniques, including attack targeting authoritative DNS servers for domain names, attacks launched from botnets built using hijacked virtual machines and HTTP application-layer attacks with highly randomized fingerprints.

“The second quarter of 2023 was characterized by thought-out, tailored and persistent waves of DDoS attack campaigns on various fronts,” web security company Cloudflare said in a new report. These included DDoS attacks launched by pro-Russian hacktivist groups like REvil, Killnet, and Anonymous Sudan against Western websites; a large increase in targeted DNS attacks; UDP amplification attacks leveraging a vulnerability in Mitel MiCollab business phone systems; and an alarming escalation in HTTP attack sophistication, the company said.